>But my sudo is still taking long, and the strace still shows those >network calls. My vague memory is that sudo can use Kerberos directly, possibly via a plugin. That might be wrong, though. But is there a reason you KDC isn't responding to those requests? That seems wrong, especially since you say kinit works fine. --Ken